Booqie Privacy
Policy

Section 1

Introduction

Booqie is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. We process personal data only for clearly defined, lawful purposes and retain it no longer than necessary for those purposes or as required by applicable regulatory obligations.

By registering an account on Booqie, making a deposit, or otherwise accessing our services, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should cease use of the platform and may request account closure by contacting our support team.

Section 2

Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is the Booqie Operator.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller pursuant to a written agreement.
• "KYC Data" — identity verification documents and associated data collected during the Know Your Customer process, including government-issued identification and proof of payment method.
• "Cookies" — small text files stored on a User's device to enable session management, personalisation, and analytics functions.
• "Third Party" — any natural or legal person other than the User and the Operator, including payment processors, identity verification providers, and regulatory authorities.

Section 3

Data Controller

The Data Controller responsible for the personal data processed under this Policy is the entity operating the Booqie platform under international online gaming licensing. The Operator holds a gaming licence issued under Curaçao jurisdiction, which imposes ongoing compliance obligations in relation to data handling, player fund protection, and anti-money laundering procedures.

For all data protection enquiries or to exercise your rights under this Policy, please contact Booqie's support team using the contact details provided in Section 16 of this document.

Section 4

Personal Data We Collect

Booqie collects the following categories of personal data from Players, depending on the nature of the interaction:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification through the KYC process.

Section 5

Legal Basis for Processing

Booqie processes personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between Booqie and the Player — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements under our licensing authority, and responses to lawful requests from regulatory or law enforcement bodies.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where our legitimate interests are not overridden by the Player's rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Section 6

How We Use Your Personal Data

Booqie uses the personal data it collects for the following specific purposes:

• To create, verify, manage, and maintain your Booqie account;
• To process deposits, withdrawals, and other financial transactions, including verification of payment methods such as Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and other Malaysian payment providers;
• To conduct KYC identity verification as required under our international gaming licence;
• To comply with anti-money laundering (AML) obligations — including transaction monitoring and reporting of suspicious activity to relevant authorities where legally required;
• To enforce the Terms and Conditions of the platform and investigate potential breaches, including fraud, collusion, and prohibited conduct;
• To operate responsible gambling measures — including age verification enforcement, deposit limit monitoring, and identification of players at risk;
• To communicate with you regarding account status, transaction confirmations, security alerts, and responses to support enquiries;
• To send promotional communications where you have opted in to receive them — you may opt out at any time;
• To analyse platform usage patterns and improve the quality, performance, and security of our services;
• To comply with any lawful request from a regulatory authority, court, or law enforcement body.

Section 7

Data Sharing & Third-Party Disclosure

Booqie does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: Data necessary to process financial transactions is shared with our payment partners, including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking intermediaries. Each payment processor is bound by its own data protection obligations.
• Identity Verification Providers: KYC documentation is processed by third-party identity verification services under contractual data processing agreements with Booqie.
• Fraud Prevention & AML Services: Transaction data and account information may be shared with fraud detection and anti-money laundering compliance providers for the purpose of platform integrity.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, Booqie will disclose personal data to competent authorities. We are not required to notify you of such disclosure where doing so would be unlawful or prejudicial to an investigation.
• Licensing Authority: Booqie's international licensing authority may request access to certain data as part of its regulatory oversight function.
• Professional Advisers: Lawyers, auditors, and compliance consultants acting in a professional capacity may access personal data on a confidential basis where necessary.

Section 8

International Data Transfers

As an international platform, Booqie's operations involve the transfer and processing of personal data in multiple jurisdictions, including the jurisdiction which our licensing authority is based. Personal data belonging to Malaysian players may be transferred to and processed in countries outside of Malaysia.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place — including standard contractual clauses, data processing agreements with service providers, and adherence to the data protection standards imposed by our licensing authority.

By registering an account and using the Booqie platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy.

Section 9

Data Retention

Booqie retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including ongoing compliance with legal, regulatory, and contractual obligations. Specific retention periods include:

• Account Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial compliance obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC verification process or account closure, whichever is later.
• Support Communications: Retained for up to three (3) years from the date of each communication, unless a longer period is required for ongoing dispute resolution.
• Technical and Usage Data: Retained for up to twelve (12) months from the date of collection, unless required for a longer period for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data governance procedures.

Section 10

Security Measures

Booqie implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Booqie platform is protected by256-bit Transport Layer Security (TLS/SSL) encryption.
• Encryption at Rest: Sensitive data stored in our systems is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised Booqie personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Account Security: Players are required to use a secure password and are encouraged to enable two-factor authentication (2FA) for additional account protection.
• Security Monitoring: Continuous monitoring of platform infrastructure for anomalous activity, intrusion attempts, and security vulnerabilities.
• Incident Response: In the event of a data security incident that may affect your personal data, Booqie will take prompt remedial action and notify affected Players in accordance with applicable legal obligations.

Section 11

Cookies & Tracking Technologies

Booqie uses cookies and similar tracking technologies to operate the platform, maintain session security, personalise the Player experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences (e.g., language settings, game lobby filters) and to personalise your experience on return visits.
• Analytics Cookies: Used to collect anonymised data about how Players interact with the platform — including pages visited, session duration, and error reports. This data is used to improve platform performance.
• Marketing and Tracking Cookies: Where you have provided consent, these cookies are used to deliver relevant promotional content and to measure the effectiveness of our campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Booqie platform. Disabling strictly necessary cookies will prevent you from logging into your account.

Section 12

Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data Booqie holds about you. To exercise any of these rights, please contact our support team as described in Section 16.

We will respond to all valid rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by an additional sixty (60) days, of which we will notify you promptly. We reserve the right to refuse requests that are manifestly unfounded, excessive, or in conflict with our legal and regulatory obligations.

Section 13

Minors & Age Verification

The Booqie platform is strictly for individuals aged21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is conducted as part of the mandatory KYC process for all Players.

If we determine, through age verification or otherwise, that an account belongs to an individual under 21 years of age, we will immediately close the account, void all associated bets and balances, and securely delete or anonymise the personal data associated with that account to the extent permitted by applicable law and AML obligations.

If you have reason to believe that a minor has registered an account on Booqie, please contact our support team immediately so that we can take appropriate action.

Section 14

Third-Party Services & Links

The Booqie platform integrates with third-party services including payment providers (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), identity verification providers, and game studio platforms. When you interact with these third-party services, you are subject to their respective privacy policies and terms of service, which Booqie does not control.

Booqie is not responsible for the data practices of any third-party service provider beyond the data processing agreements we maintain with them. We encourage you to review the privacy policies of any third-party service you access in connection with your use of the Booqie platform.

Section 15

Amendments to This Policy

Booqie reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy is always available at booqie.cam/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Material changes to this Policy — particularly those that affect how we use your personal data or your rights — will be communicated to you via the platform or by email where practicable. Your continued use of the Booqie platform following notification of a change constitutes acceptance of the revised Policy.

Section 16

Contact Us

For all data protection enquiries, requests to exercise your rights, or questions about this Privacy Policy, please contact the Booqie team through the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the platform — the fastest way to reach us.
• Email (plain text — not a clickable link): [email protected]

When contacting us about a data protection matter, please provide your registered account username, a clear description of your request, and any relevant reference numbers to enable our team to respond efficiently. We aim to acknowledge all data-related requests within 5 working days and to respond in full within 30 days, or soner where possible.

For general platform enquiries unrelated to data protection, our support team is equally available via live chat and email and operates with full awareness of the local context for players across Kuala Lumpur, Penang, Johor Bahru, Shah Alam, and the broader Malaysian market.